Remote connection & IT management

Boost productivity, decrease costs, and increase security with a centralized platform where you can manage a wide range of remote connections and tools.

Workforce password management

Improve your security strategy without reducing productivity by using a password management solution.

Privileged access management

Diminish the risk of insider threats and cyberattacks while providing audit and compliance requirements for your team.

Remote access management

Establish a secure entry point for internal or external segmented networks that require authorized just-in-time (JIT) access.

Solutions

All-in-one IT security toolbox for small teams.

Explore all solution packages

Remote Desktop Manager & CyberArk

Integration center

Unified solutions: seamless integrations with Devolutions

Products

The best remote connection manager in the industry

Cloud-hosted password manager built for IT professionals

Self-hosted credential manager built for IT professionals

Privileged access manager built for IT professionals

Secure remote access management — no VPN required

We believe in making powerful tools accessible to everyone

Companion Tools

Mobile, desktop application & browser extension

Remote connection launching tool

Cmdlets that interact with Devolutions products

Secrets sharing made quick, secure, and simple

System service to control privileged operations

Resources

Devolutions
Academy

Your FREE go-to hub for mastering Devolutions' suite of products and services.

Devolutions
forum

The Devolutions Forum is the place to go to connect with your peers and the Devolutions team.

Devolutions
documentation

Get answers to product specifications, settings and more on our documentation.

Devolutions
blog

Stay up to date with our weekly articles on our blog, the toolbox for your IT success.

Use cases Success stories Reports & white papers Glossary (IT and security)

Contact

Technical support Sales Contact information

Security & Compliance

Advisories Reporting a Security issue Trust Center

DEVO-2024-0012

Summary

Remote Desktop Manager Windows is affected by a vulnerability.

Affected Products

Remote Desktop Manager 2024.2.14 and earlier

Change Log

16/7/2024 - Initial publication

Severity

High

Products

Remote Desktop Manager Windows

Fix Version

2024.2.15.0

Exposure of Sensitive Information in edge browser session proxy feature

Description

Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.0 and earlier on Windows allows an attacker to intercept proxy credentials via a specially crafted website.

Remediation and Workarounds

Upgrade to Remote Desktop Manager 2024.2.15.0 or higher

Severity

7.1 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/U:Amber

Affected Products

Remote Desktop Manager 2024.2.14.0 and earlier

CVE(s)

CVE-2024-6492

Credits

Jérémy Sinou